This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa
File:                     3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa (raw, json)
Hash identifier:          /T39ZaB19x5bR+/tH2U5Q/siK/7/mlhwe+q6UdU1HiQ=
Subject key identifier:   64:C9:DE:85:2D:9D:A9:0B:23:A2:64:EB:A6:D6:81:8D:28:D7:31:97
Certificate issuer:       /CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
Certificate serial:       5E8CE68472272DFED61319C7469F24EA4C86FC34
Authority key identifier: EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa
Signing time:             Tue 06 Jan 2026 19:14:26 +0000
ROA not before:           Tue 06 Jan 2026 19:09:26 +0000
ROA not after:            Tue 05 Jan 2027 19:14:26 +0000
asID:                     263781
IP address blocks:        200.123.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Jan 2026 11:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8c:e6:84:72:27:2d:fe:d6:13:19:c7:46:9f:24:ea:4c:86:fc:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D
        Validity
            Not Before: Jan  6 19:09:26 2026 GMT
            Not After : Jan  5 19:14:26 2027 GMT
        Subject: CN=64C9DE852D9DA90B23A264EBA6D6818D28D73197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:22:6d:43:72:3d:8f:56:2a:89:89:fb:9c:
                    7b:04:0e:19:44:40:9c:94:27:b1:8b:27:8d:2b:cf:
                    f9:22:0b:6f:66:4b:bf:a5:aa:8a:84:1b:37:f5:92:
                    7b:a2:4f:1d:73:58:5a:d6:44:ea:15:d5:d0:f4:2c:
                    60:4d:6d:67:52:27:6d:48:43:84:f0:d8:1f:39:e0:
                    88:6a:d4:7e:bc:6c:4a:05:cd:aa:36:9d:9d:05:19:
                    cf:f3:69:56:33:bc:e7:3d:e6:21:de:d1:33:3f:21:
                    ec:b9:b8:0f:70:60:78:5f:51:20:ff:5c:ca:dc:4c:
                    48:44:3d:eb:82:a3:91:f4:4f:6e:33:7d:6d:c9:c4:
                    eb:6d:0f:0b:2e:38:cf:ef:aa:4a:cb:27:a2:b7:0f:
                    80:75:24:d3:9f:e0:82:4f:5e:df:15:24:23:de:3b:
                    29:02:e2:d9:20:db:ab:c9:85:36:ea:31:23:b5:6b:
                    b3:82:25:6f:bf:4b:2a:59:1c:ba:f6:6e:ac:bd:39:
                    e3:f7:31:f6:b4:4c:0a:c1:9e:ab:f4:75:ed:b8:25:
                    ed:72:20:6b:9a:98:18:dd:d1:0b:65:57:47:e7:fa:
                    ce:ec:76:94:0b:eb:7d:cf:75:9c:8e:8b:f0:6a:6c:
                    ee:12:2f:ba:a7:2d:7b:2e:f0:6e:a6:5f:a0:43:2d:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C9:DE:85:2D:9D:A9:0B:23:A2:64:EB:A6:D6:81:8D:28:D7:31:97
            X509v3 Authority Key Identifier:
                keyid:EF:64:06:F2:A9:DB:B0:8A:9E:E3:AC:2B:4F:78:EC:25:F2:DF:D7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF6406F2A9DBB08A9EE3AC2B4F78EC25F2DFD72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34909CE0FDEE7CDD67BAEAD7B789A18145065F72F93F1E18044B4A1A485C64A1/0/3230302e3132332e3139342e302f32342d3234203d3e20323633373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ee:a1:24:a4:6f:31:6d:7a:d2:58:fc:93:bc:36:6c:a6:2e:
         15:e5:e7:5d:58:ef:e7:51:ac:9c:bd:9f:34:93:a2:31:d2:3b:
         2b:c3:66:57:62:1b:97:6d:e3:ca:2b:01:1a:c6:ef:61:b1:c0:
         be:93:62:19:38:18:a9:ff:21:08:d7:98:c3:ce:97:90:4b:77:
         c6:24:8c:aa:54:2a:c8:58:78:52:73:ee:c9:db:65:e7:98:2a:
         a0:93:90:5d:a0:2a:b0:36:12:3f:43:3b:74:08:58:07:b2:c9:
         de:36:73:74:15:61:6f:76:83:54:7c:b5:8c:aa:b9:63:d1:5a:
         f6:f6:bd:cb:81:cc:94:b7:d9:03:72:02:17:f9:6d:96:bd:3b:
         06:22:38:b8:92:eb:4e:64:65:23:ec:c2:cf:45:46:b9:bd:fb:
         9e:ef:1a:25:4f:d1:04:e6:25:39:ff:a5:e7:d2:77:0a:a4:e2:
         a4:13:bd:02:60:c5:a1:df:6d:5a:f8:6f:bf:4e:f5:08:b2:e8:
         0e:c0:aa:b4:88:61:47:1a:13:aa:ae:fe:ae:9d:dd:7a:1b:3b:
         8b:18:ee:76:44:57:4d:a6:a8:8b:4e:9e:18:ce:6e:82:62:10:
         5a:e5:46:46:5d:de:cd:ca:86:50:5d:28:00:a4:68:65:a8:0c:
         a8:47:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:34:41 2026 by rpki-client